TIDS error on req with only domain constraint or only realm constraint
Bug #1703943 reported by
Jennifer Richards
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Moonshot Trust-Router |
New
|
Medium
|
Jennifer Richards | ||
Bug Description
The TID server (`tids`) returns an error with message "internal processing error" when handling a request that has only domain constraints or only realm constraints. An otherwise identical request that has both domain and realm constraints, or that has neither, will be handled correctly.
To reproduce: configure a trust router to have an RP realm with a `tid_incoming` filter with both realm and domain constraints. Issue a TID request with `tidc` and verify that it succeeds. Reconfigure the trust router without one or the other and the request should fail. Remove both and it should succeed.
Revision history for this message
| Jennifer Richards (jennifer-k) wrote | #1 |
| Changed in moonshot-tr: | |
| assignee: | nobody → Jennifer Richards (jennifer-k) |
| importance: | Undecided → Medium |
To post a comment you must log in.
As a workaround, configure a wildcard constraint (`"*"`) if only one constraint is needed.